When Your Data Is Breached
N.D.C.C. § 51-30-02 — a business must tell residents whose unencrypted information was taken
Personal information is a name with an unencrypted social security number, driver's license or ID number, financial account details with the code to use them, and the other items the section lists.
- A business holding that data must disclose a breach to every resident whose unencrypted information was, or is reasonably believed to have been, taken.
- Notice comes in the most expedient time possible without unreasonable delay, allowing for law enforcement needs.
- A breach of more than two hundred fifty people must also be reported to the attorney general.
- A violation is treated as a violation of the consumer fraud law.
Sources for this section (3)
- N.D.C.C. § 51-30-01 — Definitions
- N.D.C.C. § 51-30-02 — Notice to attorney general and consumers
- N.D.C.C. § 51-30-07 — Enforcement - Powers - Remedies - Penalties
Legal information, not legal advice. Verified as of October 2026. Applying it to a particular situation is the work of a licensed North Dakota attorney.